Step 3: Create Users

Create IAM users for the individuals who require access to AWS Elemental MediaPackage.
Add the appropriate policies to users to ensure that they have the right level of
permissions.

To create users who can access MediaPackage

In the navigation pane of the IAM console, choose
Users, and then choose Add
user.

For User name, enter the name that the user will use
to sign in to MediaPackage.

Select the check box next to AWS Management Console access, select
Custom password, and then enter the new user's
password in the box. You can optionally select Require password
reset to force the user to create a password the next time
the user signs in.

Choose Next: Permissions.

On the Set permissions for user page, choose
Attach existing policies directly.

In the policy list, search for and add the policy with the appropriate
MediaPackage permissions level.

For access to live functionality:

Use AWSElementalMediaPackageFullAccess to
allow the user to perform all actions on all live resources
in MediaPackage.

Use AWSElementalMediaPackageReadOnly to
provide the user read-only rights for all live resources in
MediaPackage.

Add policies to allow the MediaPackage console to make calls to Amazon CloudWatch
on the user's behalf. Without these policies, the user is able to use the
service's API only (not the console). Choose one of these options:

Use ReadOnlyAccess to allow MediaPackage to
communicate with CloudWatch, and also provide the user read-only access to
all AWS services on your account.

Use CloudWatchReadOnlyAccess,
CloudWatchEventsReadOnlyAccess, and
CloudWatchLogsReadOnlyAccess to allow
MediaPackage to communicate with CloudWatch, and limit the user's
read-only access to CloudWatch.